IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardware Security Module (HSM) due to improper memory allocation of an excessive size.

An authenticated user's token could be used by another source after the user had logged out prior to the token expiring.

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set.

An authenticated user could submit scripting to fields that lack proper input and output sanitization leading to subsequent client-side script execution.

An authenticated user attempting to change their password could do so without using the current password.

An authenticated user without user-management permissions could identify other user accounts.

An administrator could discover another account's credentials.

An authenticated user without user-management permissions could view other users account information.

An authenticated administrator could modify the Created By username for a user account

Users who were required to change their password could still access system information before changing their password